Most recent entries from all

bdu:2024-04279

EUVD-2026-225123

fkie_cve-2024-29156

In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.

GHSA-mvf6-hwxh-7v76 — Information leakage in YAQL

Affected: PyPI: yaql

YAQL before 3.0.0 is used in Murano, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.

gsd-2024-29156

OESA-2024-1328 — python-yaql security update

Affected: openEuler:22.03-LTS: python-yaql

YAQL (Yet Another Query Language) is an embeddable and extensible query language, that allows performing complex queries against arbitrary objects. It has a vast and comprehensive standard library of frequently used querying functions and can be extend even further with user-specified functions. YAQL is written in python and is distributed via PyPI. Security Fix(es): In OpenStack Murano through 16.0.0, when YAQL before 3.0.0 is used, the Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information.(CVE-2024-29156)

PYSEC-2026-2059 — Information leakage in YAQL

Affected: PyPI: yaql

RHSA-2024:1930 — Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (openstack-tripleo-heat-templates and python-yaql) security…

YAQL: OpenStack Murano Component Information Leakage

UBUNTU-CVE-2024-29156

Affected: Ubuntu:16.04:LTS: murano, Ubuntu:18.04:LTS: murano, Ubuntu:20.04:LTS: murano, Ubuntu:22.04:LTS: murano, Ubuntu:24.04:LTS: murano

WID-SEC-W-2024-0940 — Red Hat OpenStack: Schwachstelle ermöglicht Privilegieneskalation

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat OpenStack ausnutzen, um seine Privilegien zu erhöhen.